From 72bf6d23a706a89c9c8e1eebb0323eedc0c4d08a Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bern=C3=A1t=20G=C3=A1bor?= <gaborjbernat@gmail.com>
Date: Fri, 6 Nov 2026 14:28:44 -0800
Subject: [PATCH] =?UTF-8?q?=F0=9F=91=B7=20ci:=20run=20every=20hook=20under?=
 =?UTF-8?q?=20the=20cooldown?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

pre-commit.ci builds hook environments from the newest releases; the
scheduled maintenance pull requests build them under the seven-day
cutoff, so a young hook or one that rewrites files on a cold build passed
its pull request and failed those jobs. The gate now runs the shared
cooled-hooks workflow.
---
 .github/workflows/check.yaml           | 7 ++++++-
 .github/workflows/prepare-release.yaml | 2 +-
 2 files changed, 7 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/check.yaml b/.github/workflows/check.yaml
index 68c8d1a..e14c5d1 100644
--- a/.github/workflows/check.yaml
+++ b/.github/workflows/check.yaml
@@ -41,10 +41,15 @@ jobs:
       pull-requests: read
     with:
       dry-run: true
+  hooks:
+    name: 🧹 Hooks under the cooldown
+    uses: tox-dev/github-workflows/.github/workflows/cooled-hooks.yaml@e9dabf0e11825edd2b7ac6c152d9f4900f188815 # 6.7.0
+    permissions:
+      contents: read
   gate:
     name: 🚦 Required checks pass
     if: ${{ !cancelled() }} # codespell:ignore cancelled
-    needs: [test, release]
+    needs: [test, release, hooks]
     runs-on: ubuntu-24.04
     steps:
       - name: 🚦 Require all needed jobs to pass
diff --git a/.github/workflows/prepare-release.yaml b/.github/workflows/prepare-release.yaml
index 065d3f0..6d2d62d 100644
--- a/.github/workflows/prepare-release.yaml
+++ b/.github/workflows/prepare-release.yaml
@@ -22,7 +22,7 @@ permissions: {}
 jobs:
   prepare:
     name: 🏷️ Prepare Towncrier release
-    uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@8ad4e0493bb389ee6f3576916c9fdaa17d607477 # 6.6.1
+    uses: tox-dev/github-workflows/.github/workflows/prepare-towncrier-release.yaml@e9dabf0e11825edd2b7ac6c152d9f4900f188815 # 6.7.0
     permissions:
       contents: read
       pull-requests: read